From 898a317fc78467d9aa0c880854d51ff3434c17a5 Mon Sep 17 00:00:00 2001 From: Arnaud Nelissen Date: Sat, 13 Jun 2026 10:41:36 +0200 Subject: [PATCH] fix(docker): use --ignore-scripts on install, fix pnpm 11 build approval error --- .npmrc | 7 +++++-- Dockerfile | 11 ++++++++--- pnpm-workspace.yaml | 7 +------ 3 files changed, 14 insertions(+), 11 deletions(-) diff --git a/.npmrc b/.npmrc index cca50a2..2e0151c 100644 --- a/.npmrc +++ b/.npmrc @@ -1,2 +1,5 @@ -approve-builds=false -ignore-scripts=true +onlyBuiltDependencies[]=@prisma/engines +onlyBuiltDependencies[]=core-js +onlyBuiltDependencies[]=prisma +onlyBuiltDependencies[]=sharp +onlyBuiltDependencies[]=unrs-resolver diff --git a/Dockerfile b/Dockerfile index 5e8f211..e318a0f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,17 +1,19 @@ FROM node:22-alpine AS base -RUN npm install -g pnpm@11.6.0 +RUN apk add --no-cache openssl && \ + npm install -g pnpm@11.6.0 # ── deps ──────────────────────────────────────────────────────────────────── FROM base AS deps WORKDIR /app +ENV PRISMA_CLI_BINARY_TARGETS=linux-musl-openssl-3.0.x COPY .npmrc package.json pnpm-lock.yaml pnpm-workspace.yaml ./ -RUN pnpm install --frozen-lockfile +RUN pnpm install --frozen-lockfile --ignore-scripts # ── builder ───────────────────────────────────────────────────────────────── FROM base AS builder WORKDIR /app +ENV PRISMA_CLI_BINARY_TARGETS=linux-musl-openssl-3.0.x COPY --from=deps /app/node_modules ./node_modules -COPY .npmrc . COPY . . RUN pnpm prisma generate @@ -23,8 +25,11 @@ RUN pnpm build FROM node:22-alpine AS runner WORKDIR /app +RUN apk add --no-cache openssl + ENV NODE_ENV=production ENV NEXT_TELEMETRY_DISABLED=1 +ENV PRISMA_CLI_BINARY_TARGETS=linux-musl-openssl-3.0.x RUN addgroup --system --gid 1001 nodejs && \ adduser --system --uid 1001 nextjs diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 3d69787..3334c0e 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,6 +1 @@ -allowBuilds: - sharp: set this to true or false - unrs-resolver: set this to true or false -ignoredBuiltDependencies: - - sharp - - unrs-resolver +packages: []